Apex Racing
Features Games Tracks How It Works Download Changelog Help
Sign in Get Started

Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Apex Racing ("we", "us", "our") collects, uses, and protects your personal data when you use our website at apexracing.cc, the p0 desktop client, and related services (collectively, the "Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG), and other applicable data protection legislation.

1. Data controller

The data controller responsible for processing your personal data is:
Apex Racing
Austria
[email protected]

2. Personal data we collect

We collect and process the following categories of personal data:

2.1 Account data

When you register, we collect your email address, display name, and — if you sign in via Google or Discord — your name, profile picture, and OAuth identifiers from those providers.

2.2 Telemetry data

When you use the p0 desktop client, it captures in-game telemetry data (lap times, sector times, tire wear, fuel levels, car setup parameters, positional data) from supported racing simulators and transmits it to our servers. This data relates to your in-game performance and does not include personal data beyond your account association.

2.3 Usage data

We collect information about how you use the Service, including pages visited, features used, browser type, operating system, IP address, and timestamps. We use this data to improve the Service and ensure its security.

2.4 Communication data

If you contact us by email, we process your email address and the content of your message to respond to your inquiry.

3. Legal basis for processing

We process your personal data on the following legal bases (Art. 6 GDPR):

  • Performance of a contract (Art. 6(1)(b)) — processing account and telemetry data is necessary to provide the Service you have requested.
  • Legitimate interests (Art. 6(1)(f)) — processing usage data for security, fraud prevention, and service improvement, where our interests do not override your rights.
  • Consent (Art. 6(1)(a)) — where we send you marketing communications or use non-essential cookies, we do so only with your prior consent. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)) — where processing is necessary to comply with a legal obligation (e.g., tax or accounting requirements).

4. How we use your data

We use your personal data to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Store and analyse your telemetry data to generate performance insights
  • Send you service-related communications (e.g., weekly digests, account notifications)
  • Ensure the security of the Service and prevent abuse
  • Comply with legal obligations

5. Data sharing and transfers

We do not sell your personal data. We may share data with the following categories of recipients:

  • Hosting and infrastructure providers — to store and serve the Service. Our servers are located in the European Union.
  • Authentication providers — Google and Discord, when you choose to sign in via these providers. Only the data necessary for authentication is exchanged.
  • Analytics providers — to understand how the Service is used. We configure analytics tools to anonymise IP addresses where possible.

If any data transfer to a country outside the EU/EEA is necessary, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g., Standard Contractual Clauses or an adequacy decision by the European Commission).

6. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain certain data for legal or regulatory purposes (e.g., tax records may be retained for up to 7 years as required by Austrian law).

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — you may request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — you may request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) — you may request deletion of your personal data ("right to be forgotten").
  • Right to restriction of processing (Art. 18) — you may request that we restrict the processing of your data in certain circumstances.
  • Right to data portability (Art. 20) — you may request your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21) — you may object to processing based on legitimate interests, including profiling.
  • Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use essential cookies that are strictly necessary for the operation of the Service (e.g., session cookies for authentication). These do not require consent under GDPR.

If we use non-essential cookies (e.g., analytics), we will obtain your consent before placing them and provide a mechanism to manage your preferences.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS), access controls, and regular security reviews.

10. Children's privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected data from a child under 16 without parental consent, we will delete it promptly.

11. Supervisory authority

If you believe that our processing of your personal data infringes the GDPR or applicable data protection law, you have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna, Austria
www.dsb.gv.at

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].